BIT-node-min-2026-111497

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/node-min/BIT-node-min-2026-111497.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-node-min-2026-111497

Aliases

Published

2026-10-23T08:48:26Z

Modified

2026-10-23T13:40:35Z

Summary

[none]

Details

A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x.

Database specific

{
    "cpes":  [
        "cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*"
    ],
    "severity":  "Critical"
}

References

Affected packages

Bitnami / node-min

Package

Name: node-min
Purl: pkg:bitnami/node-min

Severity

9.2 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

22.23.4

Introduced

23.0.0

Fixed

24.22.1

Introduced

26.0.0

Fixed

26.12.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/node-min/BIT-node-min-2026-111497.json"